Cisco SPA 501G Administration Guide

Configuring Security, Quality, and Network Features
Configuring SSL VPN on the Cisco SPA 525G
Cisco SPA 500 Series and WIP310 IP Phone Administration Guide 127
5
STEP 5 Click Submit All Changes.
Configuring SSL VPN on the Cisco SPA 525G
The Cisco SPA 525G can be used in a virtual private network (VPN) to allow users
secure access to the office phone network from remote locations. Users can
connect their Cisco SPA 525G phones to the Internet and then use the VPN feature
to securely access the company phone network. This feature works on the Cisco
SPA 525G IP Phone using both SIP and SPCP.
The Cisco SPA 525G works with the Cisco AnyConnect VPN client and the
following VPN devices:
• Cisco 500 Series Secure Router
• Cisco 5500 Series Adaptive Security Appliance
• Cisco Unified Communications 520 Series
You must configure the SSL VPN device to ensure proper routing of voice data
with desired VLAN and QoS at the end of the SSL VPN server. The following
restrictions apply:
• HTTP proxy is not supported.
• SSL client certificate verification is not supported.
• CDP and VLAN tagging and QoS for the voice and PC port are not
supported on the SSL VPN tunnel.
Because using the VPN requires internal phone resources, performance can suffer
if using memory-intensive applications or configurations on the phone when the
phone is connected using the VPN. The following restrictions apply:
• Only the G.711 Audio Codec is supported.
• SRTP for secured audio is not supported.
PC Port VLAN ID 0-4095 (default 0). Value of the VLAN ID. The
phone tags all the untagged frames coming from
the PC (it will not tag frames with an existing
tag).
Parameter Description

Cisco SPA 501G Specifications

General

Brand	Cisco
Model	SPA 501G
Category	IP Phone
Language	English